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Abstract 

In a quantum system having a finite number N of orthogonal 
states, two orthonormal bases {a{\ and {bj} are called mutually un- 
biased if all inner products (a,i\bj) have the same modulus l/y/N. 
This concept appears in several quantum information problems. The 
number of pairwise mutually unbiased bases is at most N + 1 and var- 
ious constructions of N + 1 such bases have been found when N is a 
power of a prime number. We study families of formulas that general- 
ize these constructions to arbitrary dimensions using finite rings. We 
then prove that there exists a set of N + 1 mutually unbiased bases 
described by such formulas, if and only if N is a power of a prime 
number. 
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1 Introduction 



1.1 Definitions and previous results 

In the N-dimensional Hilbert space C , two orthonormal bases {cti}i<i<iv 
and {bj}i<j<N are called mutually unbiased if all inner products (ai\bj) have 
the same modulus |(ai|fej)| = 1/vN. A set of mutually unbiased bases is a 
set of orthonormal bases which are pairwise mutually unbiased. In various 
physical situations (see subsection II. 2|) . the problem is to find the maximal 
number of mutually unbiased bases. The following result is due to W.K. 
Wootters and B.D. Fields but it has been obtained independently by A. R. 
Calderbank, P. J. Cameron, W. M. Kantor and J. J. Seidel. 

Theorem 1.1 flTTj, 

• In dimension N > 2, the number of mutually unbiased bases is at most 
N + 1. 

• If N is a power of a prime number then there exist N + 1 mutually 
unbiased bases. 

In dimension N, a set of mutually unbiased bases is called complete if it 
contains N + 1 bases. If N is not a prime power, it is not known whether 
such a complete set exists, even for N = 6. Originally, constructions of N + 1 
mutually unbiased bases in dimension N, were based on the arithmetic of a 
field, where addition and multiplication are invertible (|llj). There exists 
a field with N elements if and only if N is a power of a prime number. 
Nevertheless, new constructions have been recently obtained (see jH]) using 
the arithmetic of rings, where multiplication is not invertible. Since there 
exist rings of N elements for any N, is it possible to use finite rings to 
construct N + 1 mutually unbiased bases for arbitrary dimensions ? We will 
address this issue here. First we will generalize known constructions from 
[TT] and jH] to any finite ring. Then we will prove that for dimensions N 
that are not prime powers, there does not exist a complete set of mutually 
unbiased bases described by this generalization. 

1.2 Applications to Quantum Information 

Mutually unbiased bases (MUB for short) have recently been considered with 
an increasing interest because of the central role they play in specific quantum 
information tasks. MUB are related, among others, to state estimation and 
to protocols of quantum cryptography. 
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State estimation. Mutually unbiased bases play an important role in state 
estimation of (relatively) large ensembles of identical prepared quantum sys- 
tems. MUB allow us to minimize the number of measurements needed to 
estimate a quantum state. The density matrix of an ^-dimensional quantum 
state is determined by N 2 — 1 real parameters. Hence, at least N + 1 mea- 
surements are needed to re-construct such a density matrix. One can show 
that N + l measurements are sufficient if these measurements are MUB ([7 ). 
The reason is that if two measurement bases B\ and B2 are mutually unbi- 
ased, then the information revealed by the outcomes of these measurements 
are independent. Other optimality properties of MUB with respect to state 
estimation are described in 

Quantum cryptography. The protocol BB84 of Bennett and Brassard 
([3 ) for quantum key distribution, used with the one-time pad encryption, 
is the first cryptographic protocol whose security does not depend on the 
assumption that an eavesdropper has a limited computational power. Its 
security is guaranteed by Heisenberg's uncertainty principle. 

MUB are the basic algebraic structure underlying ^-dimensional ana- 
logues of the BB84 protocol ([5]). It is precisely the use of such bases which 
allows these protocols to make the intervention of a potential eavesdropper 
detectable. Alice and Bob agree on a set of t orthonormal bases and Alice 
sends to Bob a state prepared in a basis A = {cij} taken among the t 
bases. Bob chooses a basis in one of the t bases to measure this state. If Bob 
chooses the right basis, he finds the good value. Now suppose an eavesdrop- 
per Eve has chosen E = {bj} to measure the state. Eve obtains bj as result 
with probability |(aj|5j)| 2 . Since for security purpose, one wants that when 
E is the wrong base, Eve gets no information on the original state, we should 
require that all probabilities |(eij|frj)| 2 are equal and hence equal to 1/N ( i.e. 
A and E are mutually unbiased). Moreover, as the probability to choose a 
wrong basis is 1/t, one wants to take the largest possible number of mutually 
unbiased bases. It is also known that a protocol using a larger number of mu- 
tually unbiased bases can tolerate a higher error level in the channel (see jS]). 

Wigner functions Pure or mixed quantum states are usually represented 
by the density matrix. However, there is an alternative description in terms 
of the Wigner function. Several authors have proposed to define a Wigner 
function for discrete systems having N degrees of freedom. It appears that 
the discrete Wigner function defined in J2| requires the existence of N + 1 
mutually unbiased bases. 

Finally, MUB have also been shown to be relevant to the mean king's 
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problem, see pQ and references therein. An interesting source for recent 
results and for references is the problem page in Quantum Information at 
TU Braunschweig, located at http://www.imaph.tu-bs.de/qi/problerns. 

2 Formulas for mutually unbiased bases 

A unitary transformation maps a set of MUB to a set of MUB. Hence, it is 
not restrictive to consider only sets X of MUB containing the standard basis 
{ek}i<k<N since it is always possible to choose a unitary transformation U 
that maps a given orthonormal basis in X to {e^} so that U(X) is a set of 
MUB containing {e^}. If a basis {v k} is unbiased with respect to the standard 
basis {e/c} (i.e. |(ej|fj)| = l/y/N) then \(v k )i\ = \(ei\vk)\ = l/y/N. Hence the 
coordinates of its vectors must be expressed as {vk)i = (e l0 ( fc '^) / 'y/N where 
0(fc,Z) belongs to [0,2vr]. 

For N = p n where p is a prime number and n a positive integer, there always 
exist N + 1 mutually unbiased bases. We describe here the constructions 
from JT] and [H] for these dimensions. 

2.1 Odd prime powers dimensions 

Let the superscript r denotes the basis, k the vector in the basis and I the 
component. The standard basis is (v^)i = 8^ for k, I = 0, 1, . . . , N — 1. If 
N = p n for a prime number p ^ 2, the other N = p n such bases given in jl 1| 
are, 

(v^ = -Le^/^rCrP+W) r, fc, / G ¥ pn (1) 
v N 

where F p « is the finite field with p n elements and where Tr denotes the trace 
map from ¥ p n into the prime field F p . For p > 5 odd, a new formula has been 
proposed in jS] where the polynomial rl 2 + kl is replaced by (7 + r) 3 + k(l + r). 
The trace map is a linear map from ¥ p n, regarded as a vector space, into 
F p . In the language of group theory, linear maps are group homomorphisms 
( i.e. maps that preserve sums) . The trace map induces a homomorphism 
from the additive group of F p n into the multiplicative group C* of complex 
numbers, defined by x — ► e ( 2m /p) Tr ( x ) _ 



4 



2.2 Even prime powers dimensions 

For N = 2 n , W.K.Wootters and B.D. Fields ([111) have used an ad hoc con- 
struction that may be reformulated in a finite ring R whose 4™ elements are 
sequences (xi, . . . ,x n ) with X{ G Z 4 . A much easier construction has been 
found recently by A. Klappenecker and M. Roetteler (jH]) using the Galois 
ring R = GR(4,n). Let Tr denotes the trace map from GR(4,n) into Z 4 . 
Once again T : x — > e ( 2nl /' l ) Tr ( x ) [ s a group homomorphism from GR(A, n), + 
into C*. The 2 n indexes are the elements of T n , the Teichmuller set of 
Gi?(4, n) and the 2 n bases described by 

(„<»•>), = _L e (W4)Tr((r+3fc)j) r,k,l & T n c. GR(4, n) (2) 
v 2 n 

together with the standard basis , form a complete set of mutually unbiased 
bases of C 2 " (see 0). 

2.3 How to generalize these formulas ? 

Formulas (J2J) as well as others in [Hj, share many common characteristics. 
First of all, the indexes /, k,r respectively for components, vectors and bases 
are taken in a finite ring R. Both formulas link the indexes in R to complex 
coordinates by a function / : (r, k, I) — ► T(P(r, k, I)) where P is a polynomial 
and T is a homomorphism from R,+ into C*. We will generalize these 
characteristics as follows : 

1. The functions f : (r,k,l) —>■ T(P(r,k,l)). We consider a much larger 
class of functions that we call functions preserving a direct sum decom- 
position of R (see section HJ). 

2. The set S of indexes. For formula (0) the set of indexes is the whole 
R while for formula (J2J), it is a remarkable subset of R. We will see in 
subsection 12.51 that these subsets may be defined for every ring R as 
sets closed under multiplication and transversal to a nilpotent ideal of 
R. 

3. Distinguish the index r. In formula (0) and 0, the non standard bases 
are indexed by r that takes all possible values of a set of size N. This 
can only be done for dimensions iV for which there exist N + l mutually 
unbiased bases. However there is, up to now, no result showing that 
this is true if iV is not a prime power. Therefore, we propose to give 
up formulas that are a uniform with respect to r and to consider that 
each basis r may be described by a different formula. This means that 
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for each r, we choose a different function f r : (k,l) — > f r (k,l) into C* 
such that the vectors in basis r are described by 

(t;£ r) )i = / r (M) k,leS (3) 

where each f r preserve a given decomposition Ri © i? 2 and 5 C is as 
described in previous paragraph. For the case of polynomials P and ho- 
momorphisms T, it amounts to choose for each r, different polynomials 
P r and homomorphism T r . 

2.4 Properties of rings 

In this section we recall various properties of rings that are needed for this 
paper. 

Direct sums of rings. Let R +t . be a ring where addition is commuta- 
tive but where multiplication is not necessarily commutative. If the additive 
group R+ is the direct sum R\ © R2 of two subgroups then every element 
r of R can be written in a unique way as r = r\ + r 2 where r$ G Ri and 
Ri fl i? 2 is reduced to the zero element. An element r G i? may be repre- 
sented as a couple {r\,r 2 ) and addition in R corresponds to componentwise 
addition of couples. If moreover, Ri and R 2 are two-sided ideals of R (i.e. 
r ■ Ri = Ri = Ri ■ r for every r in R), then multiplication in R is also 
reduced to componentwise multiplication of couples. Indeed, for G 
ri.r 2 belongs to both i? x and R 2 since these are two-sided ideals and thus 
r i- r 2 = = Ri fl i? 2 . For two ring elements x and y, we obtain for their 
product x.y = (x l + x 2 ).(yi + y 2 ) = x 1 .y 1 + x x .y 2 + x 2 .y l + x 2 .y 2 and since 
Xi.yj = for i 7^ j , we get x.y = x\.y\ +x 2 .y 2 . Thus (x.y)i = Xi.yi. Observe 
also that a.r\ = (ai +a 2 ).xi = a\.x\ for every a G R. We say that the ring R 
is the direct sums of its ideals R\ and R 2 . These properties also hold when 
R is the direct sum of more than two ideals. 

Polynomial functions in a ring. If a ring is a direct sum, then let us 
show that polynomial functions in R may be evaluated componentwise. A 
monomial on the set of variables {x, y, . . .} is a finite product of elements 
of this set. In a commutative ring R, a polynomial P(x,y, . . .) + r is de- 
fined as a linear combination P of monomials (on {x, y, . . .} ) with coef- 
ficients in R and of ro G R. A polynomial P + ro defines a polynomial 
function (x, y, ■ ■ ■) — > -P(x, y, . . .) + ro that maps n-uples of i? n to elements 
of R. In the non commutative case, this definition is not very convenient 
since generally x.r.y 7^ r.x.y so that products of polynomials would not 
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in general be polynomials. Hence we prefer to define a non commuta- 
tive polynomial function as P : (x,y,...) — > r + J^ fc m fc (x, y, . . .) where 
rrik(x, y, . . .) = Wk(x, y, . . . ; a, b, . . .) is a finite product of non commuting 
variables in {x, y, . . .} and of coefficients from a set {a, &,•••} C R. 

Assume now that the ring R is a direct sum R = R\@ R 2 and for r G i?, 
let r = 7*1 + r 2 be the corresponding decomposition. We have shown in 
previous paragraph that products in R may be performed componentwise. 
Thus, for each term Wk of a polynomial function Wk(x, y, . . . ; a, b, . . .) is equal 
to Wk(xi, yi, . . . ; ai, b x , . . .) + u> fc (a; 2 , 2/2, ■ • • ; a 2 , 62, • • •)• As ^l.ai = x i- a ancl 
ai.sci = a.X\ for a, a; & R we may conclude that Wk(xi, yi, . . . ; a,, 6j, . . .) is 
equal to io^, . . . ; a, b, . . .), for % = 1, 2, so that rn_ k (x, y,...) = m k {x u y u . . .) + 
rrik(x2,y2, • • •)• Hence, for a polynomial function P = P + r on Ri © i? 2 , 
we have y, ■ ■ ■) = P(%i, y%, ■ ■ •) + -P(x 2 , y 2 > • • •) an d thus for A = — r = 
P(0,0,...), 

P(x, y, . . .) = A + P(xi,yi, ...) + P(x 2 , 2/2, • • •)■ 

T/ie Sylow decomposition of a finite ring. Let i? be a finite ring and let 
\R\ = YliP? be the factorization of its order into powers of distinct prime 
numbers. The additive group R, + is a finite commutative group. Hence, 
it is equal to the direct product ®iSyl(pi) of its Sylow subgroups and thus 
every element r of R, + can be written in a unique way as r = ^2 r j where 
rj G := Syl(pi). We call the element r i; the p^ component ofr and it is the 
unique element contained in the intersection S Pi fl {r + (®j^iS Pj )} ( see jO], 
chapter 3). These subgroups may be defined as S Pi := {x : pfx = 0} where 
p^x is the repeated sum of p^ terms x. The subgroups S p . are two-sided ide- 
als of the ring R, i.e. r.S Pi = S Pi .r = S Pi for every r £ R. This is due to the 
right and left distributive property of a ring since p^ (r.x) = r.x + + r.x = 

p^ 1 terms 

r ( x + . . . + x) = r.(p^x) = r.O = if x G S^. so that r.x G S Pi and similarly 

p^ 1 terms 

x.r G S^. Hence every finite ring is the direct sum of its Sylow ideals and a 
finite ring that is not decomposable as a non trivial direct sum, must be of 
prime power order. Moreover, if \R\ = di.d 2 is the product of two coprime 
numbers (> 2) then R = Ri © R 2 where Ri := ® P \diSyl(p). 

Ring with unity. From now on, we mainly consider rings R containing a 
multiplicative unity 1 such that x.l — x — 1.x for every x G R. If R = ffi ie /i?j 
has a unity 1 and Ri 7^ {0} then lj is the unity of Ri. An element x has a left 
inverse xl (resp. right inverse xr) if xl-x = 1 (resp x.xr = 1). An element 
that has both a left and a right inverse is called a unit. If x is a unit, then 
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the inverse a; -1 is unique since xl — Xl.(x.xr) = (xl.x).xr = xr. The set 
U(R) of all units of R is a multiplicative group and by the componentwise 
multiplication U{R\ © R%) = U{R\) © f7 (i?2) • A field is a ring where every 
non zero element is a unit. 

Nilpotency. An element n of a ring i? is called nilpotent if n* = for 
some positive integer t. The set Nil(R) of all nilpotent element of R is called 
the Nilpotent radical of R. Once again, by the componentwise multiplication 
Nil(Ri © R 2 ) = Nil(Ri) © Nil{R 2 ). We say that an ideal N is nilpotent 
provided that every n G N is nilpotent. For every r G -R, if we have (r.n)* = 
then (n.r)* +1 = n.{r.n) l .r = and thus every nilpotent ideal is two-sided. In 
every ring with unity, a nilpotent element cannot be a unit but if n is nilpotent 
(n* = 0) then 1 + n is a unit. To show this, consider «t(n) = l+n+. . . + 
then since 1 = 1 — n* = (1 — n)u t (n) = u t (n)(l — n), the element u t {—n) is 
the inverse of 1 + n = 1 — ( —n) . 

Let us show that in a commutative ring, Nil(R) is an ideal. If x n = then 
(r.x) n = r n .x n = and if moreover y m = then (x + y) n+m = since 
(x + y) n+m is a sum of terms x n+m ~ k .y k which are zero for k < m and for 
k > m. In a non commutative ring R, Nil(R) is not necessarily an ideal. 
For instance, a sum of nilpotent matrices may be invertible (and thus non 
nilpotent) as shown by 

(JS)-(J!) + (!i)- 

Thus for the ring M2(R) of 2 x 2 matrices over a ring R with unity, the 
nilpotent radical is not an ideal. However the subring of upper triangu- 
lar matrices is also non commutative but it contains the nilpotent ideal 

{(s :rGi?} - 

2.5 Generalizing Teichmuller sets 

For every ring R we would like to define a subset Sr C R for the indexes k, I of 
vectors and components, in such a way that for a Galois ring R = GR(4, n), 
the set Sr is the Teichmuller set T n as in formula (J2J), while for a finite field 
R = ¥ p n we have Sr = R as in formula (JJJ). 

The set T n C GR(A, n) has remarkable properties that are used over and 
over to compute easily in GR(4, n) (see jHj). 

1. The ideal N := {2* x : *i G T n } is the nilpotent radical of GR(A, n) (N 2 = 

2. Every r G GR(4, n) can be written in a unique way as r = t Q + 2ti for 
some to? ^i i n ^n- Thus T n contains exactly one representative of each 
coset {r + N} r& R of in R ; it is a transversal to the ideal N. 
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3. T n is closed under multiplication. Therefore a product of elements 
written as t + n for t G T n and n G iV is still written in this way since 



This may be generalized to every ring R as follows. We require that the set 
of indexes Sr is closed under multiplication and that it is a transversal to 
a nilpotent ideal N. Trivially, if R is a field (as in formula (JTj)) or even a 
division ring, then N = {0} is the only nilpotent ideal, Sr = R is the only 
transversal to N and it is closed under multiplication. 

A commutative local ring is a ring that has a unique maximal ideal M 
and the Galois ring R = GR(4, n) is local. In a finite commutative local ring 
R, the unique maximal ideal is Nil(R) and the units of R are exactly the 
non nilpotent elements (see [2]). Hence in a local ring every ideal (7^ R) is 
nilpotent. Every finite commutative ring with unity is a direct sum of local 
rings (see [2j, Proposition 8.7). 



2.6 Functions preserving a direct sum decomposition 

Let R = R\ ©i?2 be a direct sum decomposition of a ring R and let r = r\ + r 2 
be the corresponding decomposition for r G R. Let be a commutative 
group with an operation * ( either " + " or " • " in this paper). For a finite set 
of variables {x, y, . . .} belonging to R, we say that a function / : (x, y, . . .) — > 
f(x, y, . . .) G preserves the decomposition R\ (BR2 if for a constant A G i? 

f(x,y,...) = \*f(xi,yi,...)*f(x 2 ,y 2 ,''') for every x,y, . . . E R. (4) 

Observe that A = (/(0, 0, . . .)) _1 because (#1)2 = (2/1)2 = ... = implies 
/(a*, yi, . . .) = f(xi + 0, 3/1 + 0, . . .) = A * /(xi, yi, . . .) * /(0, 0, . . .). If /■ is 
the restriction of / to Ri then f(x,y, . . .) = A /i(rci, 2/1, . . .) */ 2 (^2,2/2, • • •)• 
Conversely, for arbitrary functions /, from i?j into G and A G G, this last 
equation defines a function that preserves i?i © i? 2 - It may happen that / 
preserves i?i © i? 2 but does not preserve another decomposition of R. 

We have seen in subsection 12.41 that polynomial functions P on a ring 
R preserves every direct sum decomposition of R ( and in this case A = 
— P(0,0, . . .)). Thus, since group homomorphisms preserve sums, if T is a 
group homomorphism from R + into a commutative group G* and if P(x, y, . . .) 
is a polynomial function on R, then (x, y, . . .) — ► T(P(x, y, . . .)) preserves 



(ii + 7li)(t 2 + 7l 2 ) = +(ii^2 + ^1^2 + nirzA 
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every direct sum decomposition of R. Hence, these functions generalize for- 
mula (JIJ and (0) for mutually unbiased bases since those rely on expressions 
of type -^=T(P(k, I)) for k,l 6 R where is the multiplicative group of uni- 
tary complex number. This is also true for the other formulas proposed in J5| . 

More sophisticated such functions may be constructed by products. If f-g 
is a product of functions into a commutative group G. that both preserve a 
direct sum decomposition R = R x © R 2 then it is easy to show that / ■ g 
also preserves R 1 © R 2 . We have (/ • g)(x, y, . . .) = A/ • rL=i,2 f( x ^ Vh ■ ■ ■) ' 
X g Yli=i 2 d(. x ii Vii ■ ■ ■) an d since the elements of G commute, we may rearrange 
the factors as (/ • g)(x, y ,...) = \ f ■ \ g Il<=i^(/ " 9)( x » Vh ■■■)■ 

3 Such sets of MUB cannot be complete 

In this section we prove that even with all these generalizations, it is not 
possible to construct complete sets of N + 1 mutually unbiased bases for 
N ^ p n . 

3.1 Preliminary results 

Proposition 3.1 In a ring R with 1, let S C R be a set closed under mul- 
tiplication that is a transversal to a nilpotent ideal N of R. 

1. If R = R± © i?2 is a sum of rings with 1 then 

s = {SnR 1 )® {SnR 2 ) 

and each S D Ri contains at least two elements (i = 1,2). Moreover in 
each Ri, S fl Ri is closed under multiplication and is a transversal to 
NDRi. 

2. If \S\ is a product d\.d 2 of two coprime numbers > 2 and if R is finite, 
then R is a sum R\ © R 2 of rings with 1 such that \S fl R±\ = d\ and 
\SC\R 2 \ = d 2 . 

Proof. 1) R = Ri © R 2 has unity (li, 1 2 ). First, we show that every ideal I 
of R is equal to I\ © I 2 where Ij is an ideal of Rj. Since I is an ideal of R, the 
sets I\ := /.(li,0) and I 2 := 1.(0, 1 2 ) belong to I, are ideals of R and thus 
in particular Ij is an ideal of Rj. But since every i = (ii,i 2 ) G / is equal to 
i.(li,0) + i.(0, 1 2 ), we have J = J x © I 2 . By componentwise multiplication, 
an element (ni,n 2 ) is nilpotent if and only if each nj is nilpotent in Rj 
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and the ideal N is the sum N\ © N 2 of two nilpotent ideals. Since S is a 
transversal to N in R, it contains a unique element of each coset of N. Let 
x be the unique element S fl {(li, 0) + AT} then x = (1\ + n\,n 2 ) for some 
(ni,n 2 ) G iVi © A" 2 . Since iV is a nilpotent ideal,it is two-sided and we may 
consider the quotient ring R/N where multiplication of cosets is defined as 
(x + N)(y + N) = x.y + N. In R/N, 0) + A^) 2 = (l x , 0) + iV so that 
x 2 G (li, 0) + A" and also x 2 G S because S is closed under multiplication. 
Therefore we have x 2 = S H {(li, 0) + A^} = x and we have 

(li+ni) 2 = (li+m) (1), n\ = n 2 (2). 

By nilpotency n\ = for some positive integer t and by (2), n 2 = n 2 whence 
n 2 = 0. By nilpotency of ni, (1 + n{) has an inverse (li + nx)" 1 in R±. 
Multiplying both sides of (1) by (li+nx) -1 gives (li+ni) = 1 whence n x = 0. 
Finally x = (li,0) G S and the symmetric argument for S fl {(0, 1 2 ) + A^} 
shows that (0,12) also belongs to S. Thus (0,0) = (li, 0).(0, 12) G S, and 
S fl R\ (resp. S H R 2 ) contains at least the two elements (0,0) and (li,0) 
(resp. (0,0) and (0, 1 2 )). 

As {(l!,0),(0,l 2 )} G S, for every ( Sl ,s 2 ) G S, (s u 0) = s.(l 1; 0) G SnR 1 
and (0, s 2 ) = s.(0, 1 2 ) G 5 fl i? 2 . Conversely, it remains to show that for 
every (si, 0) G D i?i and (0, s 2 ) G 5 fl R 2 we also have (si, s 2 ) G 5. Since 
5 is a transversal to AT, it contains a unique element y — (si + ni, s 2 + n 2 ) G 
5n{(si,s 2 ) + A^} andy.(li,0) = (si + ni,0) in S. As (si + n 1; 0) and (si,0) 
are in S and belong the same coset of N, these must be equal and n\ = 0. 
Similarly n 2 = so that y = (si, s 2 ) G 5 whence S — (S H i?i) © (5* fl i? 2 ). 
Finally, let us show that (S* fl i?») is a transversal to Ni = N C\ Ri in i?,. 
Every coset (ri, 0) + A^ is embedded in (r±, 0) + A" which contains a unique 
element s = (ri + ni, n 2 ) of S. Then s.(li, 0) = (r x +n>i, 0) is in SnRi and in 
(r 1; 0) + Ni and so, S 1 fl Ri contains at least one representative of each coset. 
If two elements of S fl R\ belong to the same coset of N\ then these belong to 
the same coset of A^ D N\ and thus are equal. The proof is similar for (SnR 2 ). 

2) Let 7r(<2) denote the set of prime divisors of a positive integer d. For a 
finite ring R and a divisor d of let us define Syl(ii(d)) := ® P en{d)Syl(p). 
Since A^ is a transversal to the ideal N in R then <ii.c? 2 = l^l = j^l is a divisor 
of |i?|. If 7T! = 7r(di) and 7r 2 = 7r(|i?|)\7r(di). we know from subsection l2~il that 
R = Sylijii) © Syl{ji 2 ). For z = 1,2, since > 2, the subsets 7T(dj) are non 
empty so that tti = 7r(di) and tt 2 d 7r(c? 2 ) are non empty ; whence the rings 
Syl(iTi) are not zero rings and since R has unity 1, Syl{iii) has unity lj. Thus 
part (1) of the present proposition applies, 5 = {S C\ Syl(it\)) © (5 fl Syl(n 2 )) 
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and 

d ± .d 2 = \S\ = \SC] Syl(Tn)\.\S n SyZ(7r 2 )|. (5) 

As S fl Syl(7Ti) is a transversal to the ideal iV fl Sylfa) then |5 H Sylfa)] 
divides Sylfa) and so is coprime to dj (J ^ i). Thus, by equality (jHJ), 
1 5 fl /S^/Z (7Tj) | must divides dj and symmetrically d, divides (S 1 D Syl{iii) | so 
that c?i = |S" Pi S , y/(7T i )|. 
□ 



In what follows, (|) denotes the classical hermitian product (a, b) = 
J2i( a i)*bi- The tensor product v <8> w is defined by (u (g> = and 

thus (t>i <g> wi|f 2 <8> w 2 ) = (fil^-^ilw^)- 

Proposition 3.2 Le£ iV = Ni.N 2 be a product of positive integers and let 
{v!-j} . . . {v^j} be r mutually unbiased bases ofC N = C Nl ®C N2 (for G 
N := {1 . . . N\} x {1 . . . N 2 }). Assume that for each 1 < t < r there are Ni 
vectors {af } and N 2 vectors {&f } such that 

vS=o?0bf 

a (t) b (t) 

for every E N, then for 1 < t < r, { — x —} and { \ t) } are r mutually 



unbiased bases respectively in C Nl and C N2 . 



Proof. First we show that {af } and {£>f } are orthogonal bases. Since 



othonormality of {fjj} implies (v\J\v kl ) = 5{(i,j),(k,i)} — &ik$jh we have 
5 ik 5 3 i = (af ® bf \af ® fcf ) = (af |af >(&f |&f }. For every j, bf ± 
(otherwise vfj = 0) so that (af |af }(&f |&f ) = tfifc&y = <5jfc implies that 

(°f l°fc ) = for i ^ A;. Hence {af} is a set of mutually orthogonal 
vectors, thus an orthogonal basis ( not necessarily orthonormal ) of C^ 1 . 
Permuting the role of a and b gives the same result for {bf} in C^ 2 . 
Furthermore if we fix 1 < j < N 2 , the equalities 1 = (ff |t>f ) = (af |af )(&f |fef ) 
may be divided by the constant (fef |of ) so that for every 1 < i < Aq, 
L a ( t ) := (af^af^) is constant with respect to i and equal to l/(fef |&f). 
Symmetrically, L b (t) := (of | &S ) is also constant for every 1 < j < A" 2 and 

L a w ■= (of |af ) = -ffl-fflT = 7 — for every (i, j) e A 7 . (6) 

Now, it is sufficient to prove the MUB property for each couple of bases 
among the r, in C^ 1 and C^ 1 . For instance let us consider {v^j} and {v^J}. 
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We define A ijk := KafV?)! an d B j,i ■= K^I&P)!- Th e equality 

l/v / iV=|( ^ | )\ = A i;k B j>l for every (i,j),(k,l)eN (7) 

implies that and are non zero. Therefore if (i, k) is fixed and (j, I) 
varies, A^ k can be simplified and all the Bjj are equal to a common value 
Kb- Symmetrically, the A^ are equal to a common value Ka- 

In basis we have = Y2% ^t a i^ f° r ^ = ^w^w^ • Now, equality 

(jBJ) and ((Zj) prove that |Aj| = j^- whence it is constant for every (i, k). 
Therefore 

Km = i(4 2) i4 2) )i = KE^iE^)! 

that is L o( i)L o(2) = A^i^) 2 (8) 

a (2) 

Finally, we show that { — \ttj and { — ^-} are mutually unbiased bases 

IK II ll a fc II 

in C Nl Indeed \( ^ I ^ ) I 2 - l<a » 1)|a fc 2))|2 - - J_ fbv (l8l)l 

m(L . indeed K ^cd,, I ||o ( 2)|| ) I - " L a(1) L a(2) " m l b y W- 

The result for C^ 2 is obtained in the same way, using bf' = Y^j fabj for 
H = ^w^my to § ive L bW L bW = N 2 (K B ) 2 . □ 

This proposition can immediately be extended as follows to C N = C Nl ® 
. . . ® C^ 8 for dimension N = Ni . . . N s . Under assumption that each of the k 
bases is a tensor product, we may use induction to conclude to the existence 
of k mutually unbiased bases in each C Ni . 



3.2 Main results 

Theorem 3.1 Let R = Ri ®R 2 be a decomposition of a ring R. For i = 1, 2 
let Si be a non empty subset of Ri and let N = \Si\\S 2 \- For each 1 < 
c < m, let f c : R + — > C*, • be a two variables function that preserves the 
decomposition R\ © R2 and let us define N vectors {v^} of C N as 

(v ( k c) )i = f c (k,l) k,l eS 1 ®S 2 . 

Assume that, together with the standard basis, the sets of vectors {v k }i< c < 
form a set X of m + 1 mutually unbiased bases. If |Si|i=i,2 7^ 1; then 
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m < min\Si\ < N and the set X is not complete. 

i 

Proof. The function f c preserves the decomposition R\ © i? 2 so there is a 
constant A c such that f c {k, I) = \ c fc(ki, h)f c (k2, h)- For each c, let us define 
I £1 1 vectors {o^f }fci&Si of C' 51 ' and IS2I vectors {h£ }k 2 eS 2 °f ^' 52 ' as 

^) h = X cfc(k u h) , (b%) h =f c (k 2 ,l 2 ) for ki,UeSi(i = 1,2). 

Hence (v^)i = f c (k,l) = A c (a^); 1 (6^ < '')i 2 and since I takes all value in Si © 
S 2 , the vector = vty k ^ is equal to the tensor product aj^ © G 

Cl 5l H Sa L If we denote by {^Ifce^e^, {a£ Wfiu Ws a the standard 
bases respectively in C^, C' 51 ' and C' 52 ' then also vf = k ^ = aj^ © bf\ 

Therefore if the sets {v k }o<c<m form a set X of m+ 1 mutually unbiased 
bases in = C' 5,1 " 52 ', then by Proposition I3.2[ there exist m + 1 mutually 
unbiased bases in both C' 51 ' and C' 52 '. By Theorem II. 1| if each 15^=1,2 is 
at least 2 then m + 1 < \S%\ + 1 and m < min\Si\ < |Si||S2| = N thus 

i 

\X\=m + l<N+l and X is not complete. □ 

Finally, we obtain our main result : complete sets of MUB described by 
generalizations of known formulas only exist for prime power dimensions. 
Moreover, we provide an upper bound for the number of MUB described by 
such formulas. 

Theorem 3.2 Let R be a finite ring with unity. Let S C R be a subset of 
N elements that is closed under multiplication and transversal to a nilpotent 
ideal. For 1 < c < N, let T c : R + — > C*, • be a group homomorphism and let 
P c : R 2 — > R be a two variables polynomial function. Let us define N sets of 
vectors {v k }i< c <iv C N by 

( v ^) l = -L Tc (P c (k,l)) k,leS, 

and let the set X{t c }{p c } be the union of the standard basis with }i< c <jv- 

1. A set X{t c }{p c } contains at most l + min{p e i i } mutually unbiased bases 

where N = YliPi* is the factorization of N into powers of distinct prime 
numbers. 

2. There exists a complete set Xit c }{p c } ofN + 1 mutually unbiased bases 
if and only if N is a power of a prime number. 
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Proof. 



1. We prove that the conditions of Theorem lH.il applies here. 

First we show that every vector is unbiased with the standard ba- 
sis {e/.}. Every r 6 R has finite additive order n r (n r .r = 0). By 
the homomorphism property T c (n.r) = T c ( r + . „ + r ) = (T c (r)) n and 

?i terms 

as T c (0) = 1 we must have |T c (r)| n = 1 whence |T c (r)| = 1 for every 
r in i?. Thus for every vector v% we obtain | (ei\v^) \ = \(v^)i\ = 
\T c (P c (k,l))\/y/N = 1/y/N as announced. Let m + 1 be the maxi- 
mal number of mutually unbiased bases contained in X{j- c }{p c } and let 
Y C X{t c }{p c } be a set of m + 1 mutually unbiased bases. Since we 
have showed that Y U {{e^}} is also a set of MUB, the standard basis 
{efc} must be in Y. 



As \S\ = N = YliP? we ma y use Proposition 13.11 (2) to show that 
there is a ring decomposition R = ®iRi such that S = Q)iS fl Ri and 
\SnRi\ = p^. Finally, since the functions (k, I) — > T c (P c (k,l)) preserve 
every direct sum decomposition of R (see subsection HJ) , we may apply 
Theorem 13.11 to Y to show that for every % we must have m < 
Hence 1 + m < 1 + min{p e i i }. 

i 

2. If we have N+l such MUB, then by (1), YliPf = N < min{p^ i }, which 

i 

implies that N = min{p e i i } and thus N is a prime power. Conversely if 

i 

N = Pt\ we have shown in section |21 that the sets of N + 1 MUB given 
by formulas ((H) and (J2J) may be described as sets X{t c }{p c } 



The bound 1 + min{p e i i } can be easily reached for dimension N = YliP?- 

i 

It suffices to view C N as £g>iC Pi \ As (bi ® Ck\bj ® q) = (6j|6j).(cfc|q} we may 
conclude that a tensor product of two sets with t MUB is a set of t MUB in 
the product space. Since there exist at least 1 + min{p?} MUB in each 

i 

we may construct by tensor product of these, a set of 1 + min{p e i i } MUB in 

i 

the product space C . 
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3.3 Discussion on larger generalizations and conclu- 
sion 

In order to further generalize formula (J3J) it could be tempting to allow the 
index set S to be any subset of a finite ring. Unfortunately, this leads to a 
situation where any set of vectors could be described by such a formula. To 
see this, let us recall that functions / that preserve a decomposition of a ring 
R are arbitrary functions on each component Ri. If we choose a ring R that 
has no decomposition (a field for instance) then such a / is arbitrary on R. If 
S is a subset {s l3 . . . , s N } of N elements, then we may associate an arbitrary 
set of vectors {vk}i<k<N in to the couples in S x S by (sk, sj) — > (vk)i- 

This may be extended (in many ways) to a two variables function from 
Rx R into C that preserves every decomposition of R (since R cannot be de- 
composed). One cannot expect to reach algebraic conclusions that are valid 
for all N x N arrays with arbitrary complex entries (vk)i- 

For these reasons, it is difficult to generalize formula (JHJ) much more. It 
indicates that for dimensions that are not prime powers, algebraic formu- 
las providing complete sets of MUB should have a radically new structure. 
However, do these complete sets exist for any dimension ? Mathematicians 
are used to properties that behave differently for some particular dimensions 
but such an answer is unsatisfactory from a physical point of view. W.K. 
Wooters has showed that the absence of N + 1 MUB for a dimension N 
would be problematic for defining a discrete Wigner function in systems hav- 
ing iV degrees of freedom (see [12]). A negative answer to the MUB problem 
might have other physical consequences and these could be used to guide 
mathematical investigations. 
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